src-test2/sys/netgraph, branch release/5.2.0_cvs FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F5.2.0_cvs 2004-01-10T05:53:29Z This commit was manufactured by cvs2svn to create tag 2004-01-10T05:53:29Z cvs2svn cvs2svn@FreeBSD.org 2004-01-10T05:53:29Z urn:sha1:58c9ff44c8041f394c663cb9640e9b77fe07bb13 'RELENG_5_2_0_RELEASE'. This commit was manufactured to restore the state of the 5.2-RELEASE image. Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs. Lower the maximum ACK timeout for GRE packets from 10 to 1 second. 2003-11-18T20:43:23Z Archie Cobbs archie@FreeBSD.org 2003-11-18T20:43:23Z urn:sha1:f6a19065697cacda6e3b1c5d92875eb2786cb945 In practice it seems that in situations of high packet loss the ACK timeout seems to hit this maximum (perhaps inappropriately, but the estimation algorithm is not perfect, so apparently it happens). In any case, 10 seconds is way too high a value so lower to 1 second. MFC after: 3 days Introduce a MAC label reference in 'struct inpcb', which caches 2003-11-18T00:39:07Z Robert Watson rwatson@FreeBSD.org 2003-11-18T00:39:07Z urn:sha1:a557af222b70694470f63e2a0f1bf58c9dcc73fd the MAC label referenced from 'struct socket' in the IPv4 and IPv6-based protocols. This permits MAC labels to be checked during network delivery operations without dereferencing inp->inp_socket to get to so->so_label, which will eventually avoid our having to grab the socket lock during delivery at the network layer. This change introduces 'struct inpcb' as a labeled object to the MAC Framework, along with the normal circus of entry points: initialization, creation from socket, destruction, as well as a delivery access control check. For most policies, the inpcb label will simply be a cache of the socket label, so a new protocol switch method is introduced, pr_sosetlabel() to notify protocols that the socket layer label has been updated so that the cache can be updated while holding appropriate locks. Most protocols implement this using pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use the the worker function in_pcbsosetlabel(), which calls into the MAC Framework to perform a cache update. Biba, LOMAC, and MLS implement these entry points, as do the stub policy, and test policy. Reviewed by: sam, bms Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Fixed two memory leaks. 2003-11-17T19:13:44Z Ruslan Ermilov ru@FreeBSD.org 2003-11-17T19:13:44Z urn:sha1:cdea8b85bb82f57e7dd7411f8f39b1fc33a725e9 Reviewed by: harti Check the correct set of interface flags and fix a memory leak. 2003-11-17T19:13:01Z Ruslan Ermilov ru@FreeBSD.org 2003-11-17T19:13:01Z urn:sha1:d47c9466dd1151dd2e95be27f69e9219e541cdee Reviewed by: harti Change double include protection style in headers to match 2003-11-14T03:45:29Z Maksim Yevmenkin emax@FreeBSD.org 2003-11-14T03:45:29Z urn:sha1:f21fff6cf234d090e1d50a447df1f1d18a128096 the rest of Netgraph code. Reviewed by: imp, ru Approved by: imp (mentor) Make the defines that prevent multiple includes look like the 2003-11-13T13:00:56Z Hartmut Brandt harti@FreeBSD.org 2003-11-13T13:00:56Z urn:sha1:835ab74093eba41dc09fef9046b5dd85b9cfb621 others in netgraph. Bump the netgraph header version to 6 for the change of the name 2003-11-12T17:03:40Z Hartmut Brandt harti@FreeBSD.org 2003-11-12T17:03:40Z urn:sha1:67371b0f5c19367b5e985fe103db222e282c4ce5 length definitions. Reminded by: jdp Double length of node names, hook names, command strings and types. Add 2003-11-12T09:10:11Z Hartmut Brandt harti@FreeBSD.org 2003-11-12T09:10:11Z urn:sha1:387ebc6d63548efbc10fdc4ec06c28fce4da627a defines for these constants that include the trailing NUL byte. These new constants have SIZ in their name instead of LEN. As soon as all consumers in the tree are converted to use the new defines the old defines will be put under BURN_BRIDGES. Reviewed by: archie, julian, ru Approved by: re (in principle) MFS: Change interface name from "nge" to "ngeth" to avoid conflict 2003-11-11T16:12:05Z Ruslan Ermilov ru@FreeBSD.org 2003-11-11T16:12:05Z urn:sha1:80476bacd8351a64182e6581ebd57ba5fdde44fe with nge(4).